Private by default.
Every chat starts in Private mode, where only an enclave that your browser verifies can read it. You need no account to begin.
Every model says who can read it.
Pick a mode before you send, and the chat stays in it.
In ZDR and Open, Thinkr's proxy can read the chat in transit and writes none of it to disk.
No account to make.
Open the app and start. Thinkr never asks for your name, your email address, or your phone number.
Credit with no name on it.
You pay from your own wallet, and your credit comes as blind notes. Thinkr signs each note without seeing it, so a spent note does not show which payment bought it.
What Thinkr never does.
These hold in every mode.
Asked often.
Can Thinkr read my chats?
Not in Private mode. Your browser encrypts each message to the enclave, and Thinkr's proxy carries only ciphertext. In ZDR and Open, the provider of the model reads the chat to answer it, and Thinkr's proxy can read it in transit.
Who runs the enclaves?
Private mode is powered by Tinfoil, which runs the enclaves. Your browser verifies their remote attestation before it sends a word, so neither Tinfoil nor Thinkr can read the chat.
Do I need an account?
No. You can chat, top up, and back up your chats without a name, an email address, or a phone number.
What if the verification fails?
Your browser sends nothing, and the label of the chat reads Private · Not verified.
Are my chats used for training?
No. Thinkr trains no model, and every request of ZDR and Open forbids data collection, so it never goes to a provider that may train on it.
Is Thinkr anonymous?
No. Thinkr needs no account, but its proxy sees the time, the size, and the model of each request, and your IP address, which it does not store.